1. Security model

CAMTECH AI applies layered security controls across infrastructure, application access, data handling, and operational governance.

Our goal is to reduce risk, preserve availability, and protect confidentiality and integrity for client-related processing.

2. Infrastructure and platform baseline

• AWS-based hosting and service delivery components.
• Supabase-backed data services for supported workloads.
• Secure payment processing through Stripe.
• Meta channel integrations handled through approved platform mechanisms.
• Managed Infrastructure clients deploy on their own AWS accounts with full data sovereignty. CAMTECH AI provides architecture, Terraform code, and operational runbooks — the client owns the infrastructure and the data.
• Security architecture is reviewed as services evolve to maintain risk-aligned control coverage.

3. Technical safeguards

• Encryption in transit and at rest for supported systems and storage paths.
• Access control enforcement with least-privilege principles.
• Credential and secret handling controls within managed platform contexts.
• Logging and monitoring for incident detection and response support.

4. Operational safeguards

• Role-based access and approval boundaries for production-affecting changes.
• Change control practices for deployments and critical configuration updates.
• Periodic governance reviews tied to legal and platform obligations.

5. Incident response

CAMTECH AI maintains documented response procedures for security events, including triage, containment, remediation, and communication.

Notification timing depends on incident context, contractual obligations, and applicable law, with a target of notifying materially affected clients within 72 hours when legally or contractually required.

6. Shared responsibility

• CAMTECH AI secures service architecture and operational controls under our responsibility.
• Clients remain responsible for lawful data collection, end-user consent where required, and protection of client-side credentials and systems.

7. Compliance posture

CAMTECH AI aligns legal and operational controls with Colombia and US obligations relevant to our services and contract structure.

We avoid certification claims unless formally completed and maintain evidence-based language across legal documents and client communications.

8. Continuous improvement

Security governance evolves with platform changes, product expansion, and legal requirements.

Material changes impacting trust, security, or privacy handling are reflected in legal updates.